Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/7c46efba-dfa8-3b57-b73b-d01912a590d9.roa
File:                     7c46efba-dfa8-3b57-b73b-d01912a590d9.roa (raw, json)
Hash identifier:          OgAtDAueHLebzmi+84PjsvVKq/LRn/kgqPVu5+gFCI4=
Subject key identifier:   D8:4C:DC:06:8D:74:A5:CE:BC:AF:66:D9:DB:F3:36:82:33:1C:E1:1B
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584AC01654D5FEE2C376743ED900
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/7c46efba-dfa8-3b57-b73b-d01912a590d9.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     14434
IP address blocks:        142.147.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:54:d5:fe:e2:c3:76:74:3e:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=fcfdfaac-5d88-41d0-893c-4bcf5081580c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:7a:88:e2:22:fa:e2:18:a5:40:d2:10:c1:
                    00:23:05:87:a1:a3:c0:86:71:83:a1:1c:8e:5f:54:
                    31:2d:c7:bc:94:e6:02:ae:0a:0c:e4:14:55:fe:b0:
                    21:a8:d6:16:2f:4c:5b:46:2b:2f:a6:2e:ac:ff:95:
                    fa:02:b0:47:16:a0:bc:ed:01:11:e2:be:10:f1:59:
                    74:8b:e2:4e:2b:44:dd:dc:4b:7c:9f:9a:d2:4a:49:
                    a0:00:61:3d:22:1f:46:8e:8f:53:20:3d:b7:dd:d2:
                    8a:f3:da:a3:ae:d9:7d:fa:c9:32:8c:9d:33:79:04:
                    d2:5d:c6:71:4e:de:da:2c:b7:0b:77:b4:0b:98:b4:
                    74:f1:c1:19:a9:cb:3f:6d:8b:68:dc:93:bf:34:87:
                    e6:6f:1d:19:5c:f9:3f:75:f2:a0:51:71:cb:56:c6:
                    32:b3:38:5b:8b:05:ce:a4:06:43:80:9f:b3:c8:6b:
                    03:58:aa:b2:9f:0e:ac:0e:8a:52:6f:05:a1:21:02:
                    4f:de:30:5a:53:b2:c5:f1:a0:d6:a4:b9:a2:c8:54:
                    5d:6c:bb:65:25:d5:dc:db:d0:0f:e0:04:51:d4:5e:
                    16:ff:8b:61:da:c2:bc:38:31:fa:35:4d:b1:01:90:
                    bb:75:2f:57:a0:6e:3c:17:9b:6b:09:22:2e:1b:52:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4C:DC:06:8D:74:A5:CE:BC:AF:66:D9:DB:F3:36:82:33:1C:E1:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/7c46efba-dfa8-3b57-b73b-d01912a590d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:7e:26:d1:76:96:35:4f:e4:41:10:38:cd:da:c9:4e:8b:f6:
         b0:a6:f4:0e:6d:7e:a0:bc:b8:77:3a:40:6d:98:f8:33:37:2a:
         d9:16:1f:43:d8:9d:0f:4c:3a:96:d0:ff:66:52:c3:9c:0a:d2:
         e3:5c:aa:c4:2b:87:32:12:f0:66:7d:73:e2:f7:05:c9:fc:d2:
         43:81:e5:df:e3:a9:37:7d:9f:4b:f9:9f:75:96:53:e5:85:7f:
         d1:cc:d2:92:72:5a:6b:6c:77:39:b4:fa:25:b3:f2:30:17:4d:
         36:a4:67:38:fd:f9:95:82:d9:1f:43:8b:5c:ce:ee:09:8f:38:
         0c:b3:91:40:4e:80:10:9e:dc:21:34:e2:40:41:59:9e:72:09:
         b8:79:43:0d:80:45:ba:59:99:19:2e:e4:e3:61:d4:b0:aa:a9:
         78:cb:7e:a0:bb:43:e4:ba:e3:43:06:06:2a:63:c1:44:21:90:
         1f:28:14:69:cc:0e:30:90:2d:9c:e8:c1:c4:b0:2f:01:58:fd:
         3a:3d:f9:45:5f:a5:67:30:02:fe:4e:f2:7b:e3:6e:42:cb:e8:
         5d:2b:71:54:92:33:11:8c:fc:8b:b7:ec:e2:c3:bf:5b:6f:8d:
         11:3a:33:2c:7b:50:1c:6f:b0:d0:82:db:d9:56:c0:cf:62:dd:
         69:75:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:38:02 2025 by rpki-client